@algosuite/vo-mcp 0.2.0-beta.40 → 0.2.0-beta.43

package/dist/agent-auth-probe-cli.mjs

@@ -400,6 +400,7 @@ function extractModelUsage(evt) {
 }
 
 // ../../scripts/virtual-office/code-runner/claude-result-event.mjs
+var CAPPED_RESULT_SUBTYPES = Object.freeze(["error_max_budget_usd", "error_max_turns"]);
 function buildResultEvent(evt) {
   const isError = Boolean(evt.is_error) || evt.subtype === "error_max_turns" || evt.subtype === "error_during_execution";
   return {
@@ -681,7 +682,14 @@ var PROVIDER_ENV = {
   "oai-compat": ["VO_CODE_RUNNER_OAI_API_KEY"],
   // Sovereign local inference (Ollama / LM Studio). The key is OPTIONAL — most
   // local servers need none — and exists for locally secured endpoints only.
-  local: ["VO_CODE_RUNNER_LOCAL_API_KEY"]
+  local: ["VO_CODE_RUNNER_LOCAL_API_KEY"],
+  // AlgoHQ cloud consensus (ADR-002 moat plane) entitlement token. Not a model
+  // key: it authorises the runner's `vo_consensus_judgment` / `vo_verify_answer`
+  // tools against the moat. On an npm-installed runner the local consensus
+  // engine is never present (it is a workspace-only package), so WITHOUT this
+  // token every consensus call answers `unimplemented /
+  // consensus-engine-package-not-installed` (2026-08-16 finding, task fbd8659b).
+  moat: ["VO_ENTITLEMENT_TOKEN"]
 };
 var PROVIDER_ALIAS = {
   claude: "anthropic",
@@ -697,7 +705,10 @@ var PROVIDER_ALIAS = {
   "oai-compat": "oai-compat",
   local: "local",
   ollama: "local",
-  lmstudio: "local"
+  lmstudio: "local",
+  moat: "moat",
+  entitlement: "moat",
+  consensus: "moat"
 };
 function resolveProvider(name) {
   const key = String(name || "").trim().toLowerCase();

package/dist/cli.js

@@ -8400,10 +8400,15 @@ function createConsensusFallbackClient(primary, fallback, options = {}) {
 import { createRequire as createRequire2 } from "node:module";
 var require2 = createRequire2(import.meta.url);
 var KEY_SERVICE = "algosuite-vo";
+var MOAT_ENTITLEMENT_KEYCHAIN_ACCOUNT = "moat-api-key";
 var KEYCHAIN_TARGETS = [
   { account: "anthropic-api-key", envVar: "ANTHROPIC_API_KEY" },
   { account: "openai-api-key", envVar: "OPENAI_API_KEY" },
-  { account: "meta-api-key", envVar: "MODEL_API_KEY" }
+  { account: "meta-api-key", envVar: "MODEL_API_KEY" },
+  // The cloud-consensus entitlement (ADR-002 moat). Read here so an npm-installed
+  // runner — where the local engine package never exists — still has a working
+  // consensus path without an operator plumbing a secret into the daemon's env.
+  { account: MOAT_ENTITLEMENT_KEYCHAIN_ACCOUNT, envVar: "VO_ENTITLEMENT_TOKEN" }
 ];
 function loadEntryCtor() {
   try {
@@ -8703,7 +8708,7 @@ async function main() {
     if (!process.env[key] && localEnv[key]) process.env[key] = localEnv[key];
   }
   const localConsensus = tryCreateEngineConsensusClientFromEnv({ envSource: localEnv });
-  const cloudConsensus = testClient ? null : tryCreateMoatConsensusClientFromEnv();
+  const cloudConsensus = testClient ? null : tryCreateMoatConsensusClientFromEnv(localEnv);
   let consensus = testClient ?? localConsensus;
   if (!testClient && cloudConsensus && localProviders.length >= 2) {
     console.error(`[vo-mcp] local-first consensus active (${localProviders.join(", ")}); cloud moat is fallback-only`);
@@ -8713,6 +8718,8 @@ async function main() {
   } else if (!testClient && cloudConsensus) {
     console.error("[vo-mcp] fewer than 2 linked local providers; cloud moat consensus active");
     consensus = cloudConsensus;
+  } else if (!testClient) {
+    console.error("[vo-mcp] no VO_ENTITLEMENT_TOKEN (env or keychain via `vo-mcp set-key --provider moat`); consensus tools depend on a locally installed engine and will report engine-unavailable on an npm-installed runner");
   }
   let adminCallables = null;
   try {